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Privacy Breakdown of Mobile Phones from 
Surveillance Self-Defense/Electronic Freedom 
Foundation 


e https://ssd.eff.org/playlist/privacy-breakdown- 
mobile-phones 


Mobile Phone Security for Activists and Agitators 
from Sprout Distro 


e https://www.sproutdistro.com/catalog/zines/ 
security/mobile-phone-activists/ 


Books/Long-form written media: 
Rebel Alliance Tech Manual 


e https://github.com/rebel-tech/Rebel-Alliance-Tech 
-Manual 


Extreme Privacy: What It Takes to Disappear by 
Michael Bazzell 


e (available wherever you regularly find free books 
online, or purchase) 


Additional Resources 


Audio & Video: 
Error451 from The Final Straw (22m) 


e https://archive.org/details/tfsradio-Error451nO2 


How to be Anonymous in a Protest by The Hated 
One (YouTube—2 1m) 


e https://www.youtube.com/watch?v=vMJH-UJyENs 


Protestors, Here's How to Set Up a Cheap Burner 
Phone from The Intercept (21m) 


e https://theintercept.com/2020/06/15/protest- 
tech-safety-burner-phone/ 


Articles & Zines (Short-form written media): 


Burner Phone Best Practices from CrimethInc 
e https://crimethinc.com/201 7/03/27/burner- 
phone-best-practices 


What Is a Burner Phone, and When Should You Use 
One? from How-To Geek 


e https://www.howtogeek.com/7 12588/what-is-a- 
burner-phone-and-when-should-you-use-one/ 
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Additional Resources 


Introduction 


A burner phone is a temporary phone typically used 
for a specific purpose or time period. If you are 
traveling to a frontline/eco-defense space, getting 
involved in anarchist or other organizing projects, 
and/or planning actions that may require anonymous 
communications, you may want a burner phone. 


Maybe you've heard people talk about burner 
phones before and know a little bit about them, but 
don't know how to get one and set it up. That's what 
this zine is about. Step by step, start to finish, how 
to acquire a phone and dispose of it when it's time 
for it to be "burned." This guide was developed for 
anarchists engaged in organizing or action spaces, in 
light of their need to evade state surveillance and 
repression. However, the information may be useful 
to others outside that context as well. 


This is not a general introduction to smartphones. If 
you are new to phones or have not used an Android 
device before, it might be worthwhile to look up 
basic tutorials or ask a friend for help. Every phone 
is slightly different, so some menu options or 
settings may be in different places than what is 
written in this guide. 


Of course, only you know your specific security 
needs. Depending on your technology use, threat 
model(s), types of communication, people with whom 
you communicate, and other factors, some of the 
information and recommendations here may be more 


5. The battery could be saved and re-used if you or 
someone you know has a compatible phone. 
Sometimes it's helpful to have a backup battery. 
However, if you don't have a use for it, | would 
recommend disposing of that as well. If found in 
your possession, it could narrow down a range of 
phone models you may have had. 


Some of this may seem wasteful, and in some ways 
it is, but getting rid of items is the best way to 
ensure they are not connected to you. It is better to 
buy a new phone every once in awhile and waste 
some plastic than to allow surveillance agencies or 
other bad actors to gather data on you or connect 
you to clandestine activities. Stay safe, be 
dangerous. <3 
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Dispose of the Phone 


The point of a burner is that you get rid of it when 
you are done (it becomes "burned"). This does not 
have to literally involve fire (and maybe shouldn't... 
some of the chemicals may be toxic if burned), but 
just means you stop using the phone and destroy it. 


1. Delete everything from the phone. Navigate to 
Settings > System > Reset > Erase all data 
(factory reset) 


2. After ensuring the reset is complete, remove the 
battery and SIM card from the phone. 


3. Destroy the actual phone: 
run it over with a car, hit it 
with a hammer, do whatever 


seems fun. SIM cards can be 
cut with strong scissors or ‘Ae 
wire cutters. 

4. Dispose of the physical 
phone and SIM card in 
places they are unlikely to be found, and 
extremely unlikely to be connected to you. Think 

random city trash can, 

dumpster, buried in the woods 
somewhere far away from your 

l usual location and wherever 

ou used the phone. Dispose 


of the phone and SIM card in 
i separate places. 


or less suited to your needs. That being said, if you 
do not know enough about technology or security to 
understand what different choices could mean, | 
suggest choosing the more secure options until you 
are able to fully weigh the pros and cons of those 
choices. 


Also remember that your actions affect more than 
just you: poor security affects everyone in your 
network and could compromise the safety or security 
of others. Security culture is only as strong as its 
weakest links. Consider having conversations about 
security needs and norms with comrades and affinity 
groups so you are all on the same page. 


General phone security tips that also apply to a 
burner phone: 


e Choose a strong password: alphanumeric (mix of 
letters and numbers), not a common phrase, 
different from your password on any other 
accounts or devices. Not a PIN. Not Face ID. Not 
fingerprint unlock. PASSWORD. 

e If participating in activities for 
which it is imperative that you 
are not monitored in any way 
(GPS, audio, video), leave the 
phone elsewhere. 

e The only way to ensure the 
phone is not transmitting 
location data is to turn it off 
and remove the battery. Just airplane mode is 
NOT sufficient. Turning it off is NOT sufficient. 


Seriously. Take out the battery or leave it 
somewhere else if you do not want your location 
tracked. Faraday bags are also an option: they 
block signals from being sent to or from the 
phone. 

If something is extremely sensitive, consider not 
writing it down or sending it in any way. While 
risk of monitoring content and/or connecting it to 
a specific individual can be minimized, the risk is 
never zero. Communicating in person, without 
phones, in a location that is extremely unlikely to 
be monitored is the most secure way to transmit 
information. (Though, of course, that is not always 
possible; that's why this guide exists.) 

Use the burner phone minimally. This includes 
real-world tasks where a phone is not really 
necessary and reducing use of the phone to 
minimize compilation of data that could be traced 
back to you, the user. Don't log in to personal 
accounts and avoid making accounts for anything, 
as much as possible. If you must make an 
account, use a throwaway email or fake 
information. 

Photos and videos contain metadata including 
location and information about your device. 
Sending photos through Signal removes 
metadata, but emailing or uploading to a website 
might not. Use an exif or metadata remover like 
verexif.com to remove metadata from photos. 

If you think your phone may be seized, turn it off! 
If you have time, consider deleting signal or doing 
a factory reset as well. But, at minimum, turn it 
OFF. 


Additional Apps (from F-Droid) 


Installing additional apps from F-Droid is similar to 
how you would use any other app store. If you don't 
like Orbot or sometimes want to sacrifice some 
security for loading additional website features, | 
suggest installing a VPN like RiseUp or Mulvad. 
There are many other VPN options as well; this 
guide is not an in-depth analysis of their features 
and drawbacks. 


If you expect to want to use YouTube and/or listen 
to music, | also suggest NewPipe and ViMusic. 


You can also look through the apps available on F- 
Droid and download whatever you think seems 
interesting and useful. In general, having fewer apps 
keeps your device more secure: there are fewer 
opportunities for attack or infiltration and less data 
available about you, the user. 


"COPS? 
In our 498745-member 


anarchist meme group?" 


It’s more likely than you think. 


with a "+" icon in the bottom right of the screen. 
From there, you can search for the regions you 
want to download. 


For example, if! wanted to navigate offline in the 
state of Montana, | could search "Montana" or search 
"United States" then "Montana" within that folder. 
Then | could select any or both of the regional maps 
available for Montana (in this case, the state is split 
into East and West). If you plan to travel many places 
with this phone or are unsure which locations you 
need, consider downloading additional maps. 


Note that Organic Maps does not have as much 
detailed information as other apps or websites you 
may be used to, like Google Maps. Searching for 
locations in the app may or may not work. 
Sometimes it will find the street, but not a specific 
address. If you search for a store by name (like 
"Home Depot"), it may not bring up the nearest one. 
Some regions have better data than others. 


If you need to search for locations, consider using 
Google Maps through your browser 
(maps.google.com) or another online option to find 
the exact address of the place you want to go. If 
Organic Maps is unable to find the place by street 
name and number, use an address to GPS converter 
like gps-coordinates.org or addresstogps.com. Some 
aspects of security include sac rificing convenience; 
consider your specific needs and whether these 
tradeoffs make sense for you. 


Some attention to security is better than none. Even 
if you don't feel prepared to do all of these steps, 
making information about yourself harder to find (if 
not impossible) and reducing inc riminating 
evidence (if not eliminating it completely) are still 
useful. It can be overwhelming to try to do 
everything all at once; don't let that persuade you 
into giving up completely. 


Acquire the Phone Organic Maps 


Consider the purpose of your new burner phone: do 1. Open F-Droid and tap the 
you need it for standard (unencrypted) calls or texts green magnifying glass icon to 


and nothing else? A flip phone might be what you 
want. Are you trying to use signal or other 
encrypted messaging, apps, the internet, GPS 
navigation, and everything else that comes with a 


smartphone? That may be what you need. Prices for 


the cheapest flip phone or smartphone are 
comparable; in my experience the smartphone is 
usually around $10-15 more. The price of service 
plan depends on how much data and how many 
minutes you want; the type of phone is irrelevant. 


No-Contract phones available at Walmart and many 
other big box retailers. Pay in casts cover up as 
much as you feel 
comfortable with 
special attention to no 
identifying marks (eg E T 
tattoos). Leave your mS 
personal phone 
elsewhere! 


Select the phone you want and a compatible plan. 
Plans come on prepaid cards which are displayed 
7 above the corresponding 


and card are from the same 
company. 


phones. Make sure the phone 


search for "Organic Maps". 


2. Tap the app icon and press the 
blue button that says "Install". 


3. When you first open the app, it 
will ask you to download World Map. Do this, as 
it is required for setup. 


After installing World Map, you will have a general 
outline of all continents. Assuming you want to use 
this app for its offline maps, you will need to 
download more maps in specific areas. 


5. You may also be asked for location permissions. 
The most secure option is to deny location 
permissions, but any option here is likely fine. If 
you intend to use GPS navigation on your phone, 
precise location will be required. 


6. Tap the gray icon with three parallel horizontal 
lines in the bottom right, then select "Download 
Maps." 


From this menu, you can select offline maps of many 
regions in most countries. | suggest downloading 
only the maps you think you are likely to use. 


7. Maps are organized by country then region. To 
download additional maps, press the blue circle 


Simple Keyboard 


1. Open F-Droid and tap the green magnifying glass 
icon to search for "Simple Keyboard". 


You are looking for the app with 
an orange keyboard icon made by 
Tibor Kaputa. They have a whole 

suite of “Simple Mobile Tools” 

apps including calendar, voice 


recorder, notes, calculator and 
more. 


2. Tap the app icon and press the blue button that 
says "Install". 


3. When you first open the app, you will see a blue 
button that says "Change 
Keyboard". Press it. 


4. In the menu that comes 
up, there will be the option 
to "Choose input method". 
Select "Simple Keyboard". 


5. You may need to restart Choose input method 
your phone for this O “ches 
change to take effect. 


© Simple Keyboard 


Activate the Phone 


You will need to be in a place with 
wifi to set up your new burner phone. 
Some common places include fast 
food restaurants, cafés, or even the 
Walmart parking lot. If you want the 
phone to remain unconnected to your 
identity and other devices, do not 
activate it in your home or any other place you 
frequent. Also make sure you do not have your 
personal phone in the same place as the burner 


when you activate it. 


If you are traveling to the location where you intend 
to use your new burner phone, consider activating it 
in that local area. For example, if | live in Colorado 
but want a burner to use mostly in California, 
activating it in Colorado and traveling with it 
activated could give away the information that | 
started in Colorado and went to California. However, 
if | activate it when | arrive in California (or 
somewhere else along the way), my starting/home 
location remains unknown. 


Your new phone should come with activation 
instructions. Typically you have to go to a website to 
enter the phone information and plan information. 
Sometimes you can also activate your plan by calling 
a company number from the new phone. 


If you must make an account or provide an email 
address, do not use any information connected to 
your real world identity! Guerrillamail.com and 
Tempr.email provide temporary, anonymous, 
disposable email addresses. If you don't want to 
keysmash or if you need to create a memorable 
username and password, consider using a random 
word generator and write the information down 
somewhere secure (if you want to save it). 


Phone Setup 


If setting up a flip phone, you've done it! There are 
fewer steps because there are fewer features. For 
more information on using a 
burner flip phone securely (since wore great dag 
you can't use encrypted 3P EF- 
messaging apps or secure è 
websites), check out Burner 
Phone Best Practices : A User's 
Guide from Crimethinc (https:// 
crimethinc.com/2017/03/27/ 
burner-phone-best-practices). 


If you are setting up a smartphone: 
1. Charge your new phone and turn it on. 
2. Press “Start” on the homescreen to begin. 


3. When asked to create a Google account, don't! 
You can select “Skip” in the bottom left of the 
screen and avoid this completely. 


12.If you want to ensure your internet traffic is 
always routed through Tor (via Orbot), you can 
adjust your phone 
settings. Go to Settings Connection request 
> Connections > VPN > Orbot wants to set up a VPN 


Orbot (gear icon) and connection that allows it to monitor 
. network traffic. Only accept if you 
tap the slider next to Ructthaseures. 
"Always-on VPN". You A 
& appears at the top of your 
can also double check screen when VPN is active. 
the VPN is on by looking 
for the key icon CANCEL i= JOK 


mentioned in Step 11. 


Note that if you activate always-on VPN, your 
phone will not connect to internet without 
protection. You must have Orbot (or another VPN) 
running if you wish to connect to the internet. 


DuckDuckGo Browser 


1. Open F-Droid and tap the green magnifying glass 
icon to search for 
"DuckDuckGo Browser". 


2. Tap the app icon and press the 
blue button that says "Install". 


3. When you first open the app, 
your phone may ask if you 
want to change your default 
browser to DuckDuckGo. | recommend changing 
your default browser then deactivating Google 
Chrome. 


No additional setup or setting adjustments are 
needed to use this app. 


6. Press the green magnifying glass 
icon (bottom right) to search for 
Tor Browser for Android (or Orbot, 
whichever you want to install first). 
You may need to scroll to find the 
app you are looking for. (The 
“Alpha” version is also fine.) 


Tor Browser icon 
7. Tap the app you want to open its 


page. Make sure the byline on the 
app page says "by The Tor Project" 
or "by Guardian Project" and has 
been updated within the past 
couple months. 


8. Press the blue button that says 
"Install" to download the app. When 
a popup appears that asks if you 
want to install the app, select "Install". 


Orbot app icon 


9. If a popup appears saying security permissions 
are blocking app installations from "this 
source" (F-Droid), select "install anyway" and 
allow permissions in the popup settings menu 
that appears. 


10.The first time you open Orbot, you may get a 
popup asking to allow Orbot to set up a VPN 
connection. Select "OK". 


11.To use Orbot, open the app and tap the onion 
icon. When activated, the icon will turn green and 
the word "Stop" will appear. You should also see 
a small key icon appear in the top right of your 
phone screen near the wifi and cell service 
signals. Tap the onion again to deactivate Orbot. 


4. Deny all permissions or optional data reporting. 
You must accept the terms of service to use the 
device, but everything else can be declined. 


5. The default screen lock is a PIN, which is likely 
NOT sufficient for your security needs. If you set a 
PIN, change it immediately once you get through 
the setup menu. Face ID is even worse; decline 
this option. 


6. Once setup is complete and you reach the phone 
homescreen, delete all apps you do not need. 
These probably include many Google products 
(Drive, Video, Gmail), pre-installed social media 
(Facebook, TikTok), and mobile games (Candy 
Crush, Ball Sort). 


7. Swipe up on the screen to view all apps. Press 
and hold an app icon then select “App Info”. 
Then, on the settings screen that appears, select 
“Uninstall” or “Disable” (some apps cannot be 
uninstalled based on manufacturer settings). 


Apps to Get 


After you have removed all of the apps you do not 
need or want, it is time to install the apps you 
actually will use. In general, it is best to install the 
absolute minimum of what you might need. 


The following pages have a table summarizing my 
recommendations. Following the table are detailed 
instructions to download each of these apps without 
creating a Google account or using the Google Play 
Store. 


Orbot & Tor Browser 


1. Open F-Droid and go to "Settings" (gear icon in 
bottom right). 
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additional phones you could consider using one of 
those numbers instead. 


5. Signal will give you the option to set a recovery 
pin. Do not do this! Press "Skip" in the bottom 
left corner of the screen. 


A recovery pin could allow the content of your signal 
messages to be transferred to another device. 
Assuming you are using this phone to remain 
anonymous and keep your communications more 
secure, it is best to keep your signal account tied 
to only your burner device. This does mean that if 
the app is deleted or the phone is lost then all the 
messages are gone as well. However, this may 
actually be a benefit if your phone falls into the 
wrong hands. 


6. When setting your name and profile picture, do 
not use real-world or social media info. 


/ have seen people in large public chats (which are 
likely to include police or other law enforcement/ 
surveillance agencies) use all of the following in 
their signal profile: profile picture of their actual 
unedited face, legal name or everyday chosen name 
(sometimes called "civ name": the name you are 
known by in most places) and social media handle 
in name or bio. Sometimes people also use their 
signal name, profile picture, and/or bio to make 
spicy jokes about c rimes. | would recommend 
against all of these. Your friends will know who you 
are when you give them your number, a burner 
signal account should not be treated as social media. 
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with minimal tracking 


DuckDuckGo Browser 


Chrome Browser, Firefox, 


securely and anonymously |Opera 


Access the internet more 


Tor Browser 


Replacement keyboard so 


Gboard, standard pre- 


your words and keystrokes 


are not monitored 


Simple Keyboard 


installed keyboard 


Google Maps, Waze, Open 


Street Maps 
YouTube 


Watch YouTube videos 
without an account or 


Maps & navigation 
tracking 


Organic Maps 
NewPipe 


Spotify, Pandora, free radio 


Listen to music without an 


account or tracking 


In order to avoid creating a Google account on your 
new phone, here is the series of steps to install and 
begin using all of these apps securely: 


F-Droid 


1. Open your browser and go to hitps://f-droid.org/. 


2. Press the button that reads "Download F-Droid" 


3. After the apk file has been downloaded, install 
the app. Depending on your specific phone, it 
could be easiest to swipe down from the top of 
the screen, tap the download notification, and 
select "install." Or navigate to Files > Downloads 
> F-Droid.apk and tap to install. 


4. Your phone may give you a notification saying its 
security permissions are blocking app 
installations from "this source" (Chrome, or your 
default browser). If this happens, select "install 
anyway" and allow permissions in the popup 
settings menu that appears. 

@ F-Droid 

That's it! You should now have 


F-Droid running on your phone. (iji iid i eee 
If the app begins having issues CONTRIBUTE ABOUT 


(for example, all downloads 
being cancelled or getting error Nhat is F-Droid? 
notifications), uninstall and 


2 . F-Droid is an installable catalogue of FOSS (Free 
reinstall usıng these same and Open Source Software) applications for the 
steps. Android planter: The client makes it easy to 

browse, install, and keep track of updates on your 


device. 


DOWNLOAD F-DROID 


PGP Signature 


. Install the app by swiping 


Signal 


. In your browser, go to https://signal.org/android/ 


apk 


III 


© Signal 


. Scroll down to the button 


that says "Download" and 
press it. 


down from the top of the 
screen, tapping the , 
download notification, piace rs eed 
and selecting "install." Or, = a 
if you prefer, navigate 

to Files > Downloads > 
Signal-Android-website- 


That's what I did this morning too. 


prod-universal-release- Signal Android APK 
6.13.7.apk (file name may 

vary slightly as new @ signal = 
versions are released) and 

tap to install. 


Danger zone 


. When you open Signal, yOu Advanced users with special needs 


will have the option to can download the Signal APK 
directly. Most hould not d 

transfer your account or VEVE NEEE Na cae a 
this under normal circumstances. 

make a new one—make a 

new one! Signal 6.13.8 


It is easiest to use the phone 


number associated with the 
SIM of your new phone, but if X04 can verity the signing 


certificate on the APK matches this 


you have a VolP number or SHA256 fingerprint: 


QO FS AE SFe eviee BAe 
EA:FB:A2:DA:35:AF:35:C1:64 


